PT-2025-49790 · Linux+3 · Linux Kernel+3
Published
2025-01-01
·
Updated
2026-05-07
·
CVE-2025-40337
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The stmmac rx function in the Linux kernel did not properly validate checksum offload errors during packet reception. Specifically, the function would incorrectly mark packets as valid even if the hardware reported checksum failures, potentially allowing corrupt packets to be processed by the network stack. The issue stemmed from ignoring hardware status flags indicating header or payload checksum errors. The patch corrects this by checking the
csum none status flag, ensuring that the kernel's network stack performs its own validation when the hardware reports a checksum error.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Stack Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu